Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/oEHQMFbKwKGkGUYuuhOJXFgJzGA.roa
File: oEHQMFbKwKGkGUYuuhOJXFgJzGA.roa (raw, json)
Hash identifier: 1Qxou7QNVhjtV/e/5El9ebW6JPhCE+DvYDogUcKycf0=
Subject key identifier: A0:41:D0:30:56:CA:C0:A1:A4:19:46:2E:BA:13:89:5C:58:09:CC:60
Certificate issuer: /CN=aaf2288014995932737ae7f9fc224df102141255
Certificate serial: 01856D0AD059171DF9B656752C1330A84C56
Authority key identifier: AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/oEHQMFbKwKGkGUYuuhOJXFgJzGA.roa
Signing time: Sun 01 Jan 2023 11:15:03 +0000
ROA not before: Sun 01 Jan 2023 11:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198199
IP address blocks: 193.38.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:d0:59:17:1d:f9:b6:56:75:2c:13:30:a8:4c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf2288014995932737ae7f9fc224df102141255
Validity
Not Before: Jan 1 11:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a041d03056cac0a1a419462eba13895c5809cc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c0:ec:54:02:f1:78:14:de:38:ed:5b:cf:ab:
9e:62:e0:4a:7d:43:eb:5f:c3:e0:67:fc:ab:1f:ba:
db:c8:b0:fa:2c:03:62:49:bb:70:4c:46:b0:1d:1c:
7f:b1:98:f3:70:3a:ee:ac:95:f6:e2:5c:71:75:e8:
5e:bb:eb:b5:2b:a7:3f:4e:af:8b:07:4d:52:d8:4c:
3c:70:ef:67:ce:2b:cc:67:fc:5f:ab:10:c0:48:c9:
dc:df:76:de:0c:00:59:08:5c:24:20:18:ed:f5:93:
47:19:29:33:72:4f:47:15:c8:4f:95:f5:be:f1:14:
27:c3:a8:de:89:d4:2e:68:67:21:88:0c:98:46:2d:
43:34:b6:cc:4c:aa:7d:16:02:8a:9c:70:a2:e6:fb:
31:44:f0:97:01:c1:aa:1d:3c:58:07:fe:f7:29:d7:
a6:a2:a6:3f:27:c8:bb:44:1d:30:87:f6:5c:3b:6b:
e5:1b:a0:09:71:14:26:ad:1f:9e:45:b9:33:66:75:
d8:d2:f2:bd:20:92:b1:4f:32:c9:4c:41:5c:46:16:
d6:d3:68:a2:34:c5:0f:fb:7f:08:ec:70:7e:0a:ec:
40:c9:35:5f:d3:17:b3:47:e0:f9:a9:2d:01:08:ba:
03:95:5f:3b:71:31:87:a7:8c:cd:1b:70:0f:9b:59:
67:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:41:D0:30:56:CA:C0:A1:A4:19:46:2E:BA:13:89:5C:58:09:CC:60
X509v3 Authority Key Identifier:
keyid:AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/oEHQMFbKwKGkGUYuuhOJXFgJzGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.48.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f2:88:b4:20:34:3d:1a:c3:43:b7:da:88:55:67:b9:07:f6:
62:e1:d8:37:28:e2:f5:22:6e:76:13:53:dd:a1:b9:df:9b:28:
cb:e0:b1:9b:7b:97:80:e2:30:c5:22:e2:c8:e4:d9:d8:09:c5:
c1:20:15:01:40:66:18:10:5d:79:8d:28:57:8d:4c:f8:95:1a:
c1:db:e3:af:e4:37:19:cc:47:6d:37:73:60:44:50:10:e5:f4:
9c:51:46:e7:90:69:22:e8:36:b8:2f:cd:38:78:8d:98:37:c5:
42:39:68:47:90:13:1f:9b:70:68:f3:42:a4:5a:85:3c:6c:36:
69:d4:d8:4e:23:8e:ab:88:d7:fe:7d:35:34:13:4b:42:be:3b:
48:5b:c5:e4:20:0b:fb:58:dc:56:c5:61:9c:18:2c:19:10:be:
8d:c0:ac:85:fe:51:2a:7d:cd:13:39:e6:14:93:f8:cc:25:6b:
06:d5:03:c6:34:04:eb:52:fe:7e:6a:f3:30:e4:3f:bf:63:8a:
cf:88:44:ec:54:56:66:04:74:ee:7e:79:90:c2:53:37:a3:88:
ee:d6:9e:da:0a:db:c8:69:84:03:65:cc:e8:f7:3a:13:09:da:
76:98:54:7d:a0:7f:29:c9:81:e8:d4:a3:45:4c:89:1f:d7:a1:
f2:ca:16:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:34 2025 by rpki-client